Location: Huntsville, Alabama
Founded in 2012, Bugcrowd is the preemptive security platform that unifies exposure discovery and assessment, offensive testing, and intelligence shaped by AI and human insight to help organizations avoid, discover, and validate real-world risk. Bugcrowd helps security teams move faster by identifying the exposures that matter most so they can act first and stay ahead of attackers. By combining the power of humans and AI, teams can preempt attack paths and prevent breaches. Based in San Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit
www.bugcrowd.com
.
Job Summary
The Staff Full Stack Engineer engineer role in which you lead technical efforts, owning system architecture and development across the stack. You will exercise high discretion over technical decisions to achieve business outcomes.
You will be building external attack surface management technology that builds a picture of a target organization from the outside: domains, hosts, software, people, registrations, documents the customer hands us. You will own the part of the system that turns all of that into facts an analyst can trust: what we observed, what we inferred from it, where each fact came from, and what a human decided about it. Your job is to make it a general framework for passive illumination, so the next data source is a week of work, not a new tab.
Education, Experience, Knowledge, Skills, and Abilities
7+ years of experience of software development experience
Strong proficiency in TypeScript and modern JavaScript.
Extensive experience with React and JavaScript web development frameworks (Next.js preferred)
Familiarity with OAuth2, JWT, and other authentication/authorization frameworks.
Experience with CI/CD pipelines and cloud deployment platforms (Vercel, AWS, Azure, or GCP)
Experience with ORM frameworks and relational databases (Prisma, Drizzle, PostgreSQL)
Excellent debugging, analytical, and problem-solving skills.
Cybersecurity knowledge, such as how penetration testing, OSINT, and red teaming works.
Active secret security clearance is required.
Preferred Experience
Hands-on experience with LLM APIs (OpenAI, Anthropic, etc.) and AI application development
Familiarity with AI orchestration frameworks and agent-based systems
Working Conditions & Physical Requirements
The ideal candidate must be able to complete all physical requirements of the job with or without reasonable accommodation.
Sitting and / or standing - Must be able to remain in a stationary position 50% of the time
Carrying and / or lifting - Must be able to carry / move laptop as needed throughout the work day.
Environment - hybrid, work-from-home most of the time with some onsite work.
Pay Range Disclosure
The base pay range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to Qualifications, Geographical Location, Education/certifications, Experience, Skill Sets, Training, and other business and organizational needs.
At Bugcrowd, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for the position i
s: $151,360 - $189,200.
This position may also be eligible to participate in a discretionary bonus program or commission plan, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Culture
At Bugcrowd, we understand that diversity in the workplace is vital to a company’s success and growth. We strive to make sure that people are included and have a sense of being part of making Bugcrowd not only a great product but a great place to work.
We regularly hear from both customers and researchers that Bugcrowd feels like a family, and we strive to maintain that internally as well.
Our team consists of a broad range of people: musicians, adventure sports junkies, nature lovers, parents, cereal enthusiasts, night owls, cyclists, artists—you get the point.
At Bugcrowd, we are solving security threats and vulnerabilities that are relevant to everyone, therefore we believe solving these problems takes all kinds of backgrounds. We value the perspectives and experiences people from underrepresented backgrounds bring.
Disclaimer
This position has access to highly confidential, sensitive information relating to the technologies of Bugcrowd. It is essential that the applicant possess the requisite integrity to maintain the information in the strictest confidence.
The company is authorized to obtain background checks for employment purposes under state and federal law. Background checks will be conducted for positions that involve access to confidential or proprietary information (including trade secrets).
Background checks may include Social Security verification, prior employment verification, personal and professional references, educational verification, and criminal history. Applicants with conviction histories will not be excluded from consideration to the extent required by
law.
Any personal data you submit in connection with your application will be processed in compliance with Bugcrowd's Privacy Policy, which you may review here:
https://www.bugcrowd.com/privacy
.
Equal Employment Opportunity:
Bugcrowd is EOE, Disability/Age Employer.
Individuals seeking employment at Bugcrowd are considered without regards to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation.
Bugcrowd is committed to the full inclusion of all qualified individuals. In keeping with our commitment, Bugcrowd will take the steps to assure that people with disabilities are provided reasonable accommodations. Accordingly, if reasonable accommodation is required to fully participate in the job application or interview process, to perform the essential functions of the position, and/or to receive all other benefits and privileges of employment, please contact HR at ADA at bugcrowd.com.
Apply at:
https://www.bugcrowd.com/about/careers/
Location: Rio de Janeiro or São Paulo, Brazil
Why Join Exadel
We’re an AI-first global tech company with 25+ years of engineering leadership, 2,000+ team members, and 500+ active projects powering Fortune 500 clients, including HBO, Microsoft, Google, and Starbucks.
From AI platforms to digital transformation, we partner with enterprise leaders to build what’s next.
What powers it all? Our people are ambitious, collaborative, and constantly evolving.
About the Client
A leading global digital banking platform and one of the largest neobanks in Latin America, headquartered in Brazil. The company provides a mobile-first suite of financial services—including credit cards, savings accounts, and investments—designed to eliminate bureaucracy and high fees. By leveraging advanced data analytics and a customer-centric digital infrastructure, the organization delivers transparent and accessible financial solutions to millions of users across Brazil, Mexico, and Colombia.
What You’ll Do
Design, implement, and maintain cloud infrastructure using Infrastructure as Code
Support the platform architecture across private networking, containers, edge and CDN services, managed storage, IAM, and security boundaries
Develop and maintain CI/CD pipelines, including federated identity, access controls, and separation between read and write operations
Implement platform observability, monitoring, alerting, and operational dashboards
Establish secrets-management and rotation processes
Develop disaster-recovery, resilience, and business-continuity capabilities
Build and maintain serverless functions and infrastructure automation using Python
Establish security guardrails and operational standards for a multi-tenant development platform
Collaborate with AI engineering teams to integrate agent capabilities and automated deployment workflows
Support ephemeral cloud environments used for AI-powered application development
Improve production readiness through documented, reviewable, and reversible infrastructure changes
Troubleshoot complex platform issues and conduct root-cause analysis
Take end-to-end ownership of platform stability, reliability, and operational performance
Identify opportunities to reduce deployment friction and improve the developer experience
Contribute to the continuous improvement of platform architecture, tooling, security, and operations
What You Bring
Experience designing, implementing, and operating cloud-native infrastructure within a public cloud environment
Hands-on experience using Infrastructure as Code in production environments
Experience with Go or Go-based infrastructure tooling
Understanding of cloud networking, private networks, firewalls, containers, edge and CDN services, managed storage, and IAM
Experience building and maintaining CI/CD pipelines, preferably using GitHub Actions
Knowledge of federated identity, authorization policies, least-privilege access, and secrets management
Experience implementing observability, monitoring, alerting, and disaster-recovery strategies
Proficiency in Python for infrastructure automation, serverless functions, or supporting services
Experience supporting multi-environment architectures and production-grade platforms
Understanding of platform security, resilience, scalability, and operational reliability
Strong troubleshooting and root-cause analysis skills
Strong written communication and technical documentation skills
Professional English proficiency
Ability to work effectively in ambiguous environments, make sound technical decisions, and take ownership of outcomes
Nice to have
Experience operating multi-tenant platforms for internal enterprise users
Knowledge of cloud-security guardrails and software supply-chain security
Experience with on-call operations, incident management, and production reliability
Familiarity with AI-powered development platforms
Exposure to agent-based engineering and deployment workflows
Experience designing infrastructure to reduce blast radius and isolate failures
Knowledge of controlled deployment, rollback, and change-management practices
Experience supporting developer platforms or internal platform-engineering products
English level
Upper-Intermediate
Work Type:
Remote
Location Requirement:
Candidates must be based in São Paulo or Rio de Janeiro
Legal & Hiring Information
Exadel is proud to be an Equal Opportunity Employer committed to inclusion across minority, gender identity, sexual orientation, disability, age, and more
Reasonable accommodations are available to enable individuals with disabilities to perform essential functions
Please note: this job description is not exhaustive. Duties and responsibilities may evolve based on business needs
Compensation details are shared with candidates at the early stage of the recruitment process.
The offer is not binding until a signed contract is in place.
Your Benefits at Exadel
Exadel benefits vary by location and contract type. Your recruiter will fill you in on the details.
International projects
In-office, hybrid, or remote flexibility
Medical healthcare
Recognition program
Ongoing learning & reimbursement
Well-being program
Team events & local benefits
Sports compensation
Referral bonuses
Top-tier equipment provision
Exadel Culture
We lead with trust, respect, and purpose. We believe in open dialogue, creative freedom, and mentorship that helps you grow, lead, and make a real difference. Ours is a culture where ideas are challenged, voices are heard, and your impact matters.
Location: USA
Workplace: Remote
Solvd Inc. is a rapidly growing AI-native consulting and technology services firm delivering enterprise transformation across cloud, data, software engineering, and artificial intelligence. We work with industry-leading organizations to design, build, and operationalize technology solutions that drive measurable business outcomes.
Following the acquisition of Tooploox, a premier AI and product development company, Solvd now offers true end-to-end delivery—from strategic advisory and solution design to custom AI development and enterprise-scale implementation. Our capability centers combine deep technical expertise, proven delivery methodologies, and sector-specific knowledge to address complex business challenges quickly and effectively.
Solvd is migrating a Tier-1 US payments platform from a single AWS region to a multi-region architecture.
We're hiring multiple Database Engineers to implement the DynamoDB replication, failover, and operational tooling for this program. You'll work under the Principal Database Architect and partner with the client's data and SRE teams.
WHAT YOU'LL DO
- Implement and operate cross-region replication using Amazon DynamoDB Global Tables, ensuring reliable multi-region data replication, high availability, consistency, and disaster recovery.
- Codify everything in Terraform (or CDK).
- Build the observability layer for replication health: lag metrics, consistency checks, alarm thresholds, and runbook automation. Datadog is the primary observability stack; CloudWatch is the baseline.
- Author and execute failover and failback runbooks. Run game-days using AWS Fault Injection Service. Measure and report against RTO and RPO targets.
- Implement KMS cross-account replication, IAM service principals for replication roles, and the secrets and parameter strategy for region-local dependencies.
- Support data extraction from the monolith into microservices: build CDC pipelines (DMS, DynamoDB Streams, Kafka Connect, Debezium), validate data integrity, and own the cutover sequence for individual extractions.
- Pair with application engineers on connection-string abstraction, retry and idempotency patterns, and graceful degradation during region failover.
- Write design docs and runbooks the client team can take over after the engagement.
WHAT YOU'LL BRING (REQUIRED)
- 8+ years in production database engineering on AWS, with hands-on responsibility for at least one of: payments, banking, brokerage, or comparable financial-services workloads.
- Deep production experience with DynamoDB and at least two of: Aurora MySQL, Cassandra, ElastiCache (Redis or Valkey), DocumentDB, Neptune. Working knowledge of at least two more.
- Practical experience with cross-region replication in production using DynamoDB Global Tables: you've configured and operated multi-region DynamoDB deployments and handled failure scenarios such as replication conflicts, regional outages, replication delays, and consistency or version-skew issues.
- Strong Terraform (or CDK). You can build a multi-region module from scratch and explain the trade-offs.
- Comfort with CDC tooling (DMS, DDB Streams, Kafka Connect, or Debezium) and the operational gotchas (schema drift, ordering guarantees, replay).
- Linux, networking fundamentals (VPC, Transit Gateway, peering, DNS), and IAM / KMS proficiency.
- Solid written communication and ability to operate in a regulated client environment.
NICE TO HAVE
- Cassandra multi-DC operations experience at scale (nodetool workflows, repair strategy, tombstone management, cross-region anti-entropy).
- AWS MSK or Kafka MirrorMaker 2 experience for cross-region event replication.
- Experience with Datadog Database Monitoring and custom CloudWatch metrics.
- AWS Database Specialty or Solutions Architect Associate / Professional certifications.
When you join Solvd, you'll…
- Shape real-world AI-driven projects across key industries, working with clients from startup innovation to enterprise transformation.
- Be part of a global team with equal opportunities for collaboration across continents and cultures.
- Thrive in an inclusive environment that prioritizes continuous learning, innovation, and ethical AI standards.
Ready to make an impact?
If you're excited to build things that matter, champion responsible AI, and grow with some of the industry’s sharpest minds. Apply today and let’s innovate together.
Solvd is an equal opportunity employer.
JКомпания не указана
47
Управление вакансиями скоро появится
Скрытые компании и отметки о просмотре ещё не подключены.
-5+ years of experience in DevOps, Cloud Engineering, or Infrastructure Engineering. -4+ years of hands-on experience with GCP, Terraform, and Terragrunt.
Location: Russia; Moscow; Perm
Workplace: remote
ABOUT US
Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.
For more information, visit xsolla.com.
The role
THE ROLE
We are hiring a
Senior Backend Engineer
for two platform products:
Xsolla ID
is the identity and authentication platform behind sign-in, account management and SSO across Xsolla products.
Xsolla ZK
is Web3 wallet infrastructure: smart wallets and account abstraction on a zkSync-based L2.
Both products sit on users' most sensitive flows, logging in and signing transactions, and other Xsolla teams build on top of them.
WHAT YOU WILL OWN
The backend services of your product area end to end: design, implementation, release and production operation, including on-call
Architecture across services: service boundaries, integration contracts and data ownership. You make these decisions and justify them in writing
Reliability and security of critical flows: SLOs, failure handling, protection of user data and credentials
Service performance and cost under load
WHAT YOU WILL DO
Design and build services and APIs (REST, gRPC) for authentication, account management and wallet operations
Define service boundaries and integration contracts with other Xsolla teams
Design data models and storage; optimize schemas and queries
Build event-driven and asynchronous workflows
Own observability: metrics, logs, tracing and alerting, and act on what production tells you
Take part in on-call, incident response and post-mortems
Improve the engineering environment: CI/CD, infrastructure-as-code, testing
Review code
Set up and maintain AI tooling in the repositories (Claude Code, Codex, Cursor: rules, context, harness) so the team uses it effectively
Responsibilities
Language and platform
5+ years of commercial backend development
Go: idiomatic code, concurrency (goroutines, channels, context and cancellation), memory and performance profiling (pprof)
Data
Relational databases (PostgreSQL, MySQL): schema design, indexes, query plans, transactions and isolation levels, safe migrations
Caching (Redis): when to cache, invalidation, consistency trade-offs
Distributed systems
Service architecture and distributed-systems trade-offs: consistency, availability, idempotency, retries, failure modes
Asynchronous messaging and event-driven design (Kafka, RabbitMQ or NATS): delivery guarantees, ordering, reprocessing
APIs
Designing REST and gRPC APIs: versioning, backward compatibility, contract documentation (OpenAPI / Swagger, Protobuf)
Security and identity
Application security: common vulnerability classes (OWASP Top 10), secrets management, safe handling of user data
OAuth 2.0 / OIDC from the server side: flows, tokens, sessions
Operations
Containers and orchestration (Docker, Kubernetes) at the level of deploying and debugging your own services
Observability (we use Datadog; experience with Prometheus, Grafana, ELK / Graylog or OpenTelemetry also counts): metrics, logs, tracing and alerting; diagnosing incidents in production
Engineering practices
Testing: unit, integration, contract
Git, CI/CD (GitLab CI or similar)
AI-assisted engineering
Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for development and review, including configuring them for a repository
English
Reading technical documentation in English
Nice to Have
Web3 backend experience: blockchain integration, wallet infrastructure, account abstraction
High-load systems
Cloud platforms (GCP, AWS or Azure) and infrastructure-as-code
NoSQL databases (MongoDB or similar)
Domain experience in gaming, e-commerce, fintech or payments
HOW WE WORK
Decisions in writing.
Significant technical decisions are written up as an RFC or ADR that lays out the options and trade-offs. We discuss the document, not a blank whiteboard.
AI is part of everyday engineering.
We use AI coding tools for development and review, and we treat configuring them for a codebase as real engineering work.
HOW WE HIRE
Intro call.
Your background, your motivation and the role.
Technical interview.
Built directly on the
What you will own
and
Required
sections above. We won't ask about anything this posting doesn't promise.
Bar raiser.
An engineer from outside the hiring team checks that you raise the overall engineering bar.
THE TEAM
You will work alongside product managers, designers, backend and frontend engineers, QA and DevOps.
BENEFITS
We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play.
EMPLOYMENT DETAILS
Location: Remote
Employment Type: Full-time
Schedule: 10:00–19:00 (flexible)
Contract: Employment agreement (entity or EOR arranged per candidate location)
EQUAL EMPLOYMENT STATEMENT
Xsolla is dedicated to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, language, sexual orientation, national origin, genetics, political beliefs, disability, age, marital status, social background or other characteristics.
We are committed to compliance with all fair employment practices regarding citizenship and immigration status.
CONTACT
If you have questions regarding our hiring practices, please contact careers@xsolla.com. For more vacancies, visit xsolla.com/careers.
Location: Belgrade, Serbia
Workplace: remote
Main Responsibilities
Work with stakeholders to understand business processes, identify problems, and define what a successful solution should achieve.
Turn business needs into clear requirements, user flows, prototypes, and manageable delivery milestones.
Prioritize work across multiple projects, balancing business value, delivery speed, and technical complexity.
Use AI development tools to build and iterate on applications, integrations, and automations — writing or modifying code directly when needed.
Evaluate AI-generated implementations, challenge architectural decisions, and validate code quality, security, and maintainability.
Own the user experience, working with stakeholders to make applications intuitive and useful.
Take solutions into production, making sound decisions about hosting, infrastructure, deployment, and integrations.
Ensure appropriate monitoring, logging, access controls, secrets management, and backups are in place.
Validate releases, gather user feedback, track adoption and outcomes, and use what you learn to guide improvements.
Own the ongoing health of your products, coordinating incident resolution and addressing underlying issues with the team.
Required Qualifications
3+ years of professional software development experience, including substantial frontend experience.
Strong JavaScript/TypeScript skills and experience with React or a comparable frontend framework.
Practical experience with backend development, APIs, databases, and SQL.
A solid understanding of software architecture and system design, including reliability, scalability, data consistency, and common engineering trade-offs.
Understanding of web and networking fundamentals: DNS, HTTP/HTTPS, TLS, and proxying.
Hands-on experience deploying applications and working with Linux, Docker, and CI/CD.
Experience troubleshooting production issues and working with monitoring and alerting.
Understanding of application, infrastructure, and third-party dependency security.
Experience using AI development tools, with the technical judgment to verify their output and recognize when an approach needs to change.
The ability to clarify ambiguous requests, explain trade-offs, and drive work through to completion.
An interest in understanding users, making product decisions, and taking ownership beyond implementation.
Nice to Have
Experience turning a business problem into a solution and supporting it after launch.
Familiarity with product discovery, prioritization, analytics, or project delivery.
Interface design experience and familiarity with Figma and design systems.
Experience with high-traffic systems, caching, queues, and performance optimization.
AdTech experience and an understanding of advertising networks and platforms.
Familiarity with BigQuery, Google APIs, and integrations with tools such as Slack, Asana, or HubSpot.
подготовка и поддержка окружений для разработки, тестирования и демонстрации решений; сборка, запуск и сопровождение приложений в Docker, актуализация Dockerfile и Docker Compose‑конфигураций;
Location: Москва
Наша команда работает над флагманским продуктом компании - программой долгосрочных сбережений, которая является основным продуктом Негосударственного Пенсионного Фонда. Мы ищем возможность усилить команду за счет опытного Java-разработчика уровня Senior.
Первый этап отбора на эту вакансию – общение с AI-рекрутером. После отклика вам на почту и в чат на платформе HeadHunter придет приглашение пройти первичное интервью с ГигаРекрутером в Telegram. Диалог займёт примерно 10 минут. Его задача — уточнить недостающие детали и ускорить рассмотрение вашей кандидатуры.
ГигаРекрутер только начинает свой путь, поэтому просим относиться с пониманием. Ваш опыт и участие помогут сделать его удобным и полезным!
Обязанности
* Управление командой разработки ИС: планирование ресурсов, распределение задач, контроль сроков, качества и бюджета; проведение 1:1, оценка эффективности, наставничество;
* Участие в развитии архитектуры: проектирование и контроль реализации API, микросервисов, интеграций и CI/CD; обеспечение доступности, масштабируемости и отказоустойчивости;
* Организация процессов разработки: ведение бэклога, планирование спринтов, контроль code review, тестирования (unit/integration), баг-трекинга и управления релизами;
* Обеспечение качества кода и архитектуры: организация аудитов, выявление уязвимостей и несоответствий требованиям безопасности, координация исправлений;
* Внедрение SDD и AI SDLC: адаптация генеративных инструментов для кода, тестов и документации, автоматизация рутинных задач, повышение производительности команды;
* Координация взаимодействия с frontend-разработкой, тестированием, аналитиками, DevOps, отделом безопасности и инфраструктурными подразделениями; управление ожиданиями стейкхолдеров;
* Контроль DevOps-решений и observability: централизованное логирование, метрики, трассировка, алертинг;
* Участие в согласовании технических решений, оценке трудозатрат, рисков и сроков; проведение техсобеседований и участие в найме;
* Обеспечение исполнения заявок и соблюдения стандартов работы с ИТ-ресурсами, принятых в Фонде;
* Взаимодействие с отделом безопасности по вопросам соответствия ПО текущим стандартам;
* Управление инцидентами: организация диагностики, устранение узких мест, оптимизация производительности, проведение ретроспектив и внедрение улучшений.
Требования
* Опыт управления: Руководство командой разработки от 3 лет, общий опыт Java-разработки от 5 лет;
* Управление проектами: Опыт планирования, оценки сроков, управления рисками и бюджетами в проектах по разработке высоконагруженных Spring Boot приложений;
* Опыт работы с архитектурой: Проектирование модульных, масштабируемых систем с использованием DDD, Clean Architecture, Event Sourcing.
* Опыт построения CI/CD, опыт с Docker, Kubernetes (Helm, service mesh), GitOps;
* Опыт работы с базами данных: Глубокое владение SQL и NoSQL (PostgreSQL, MongoDB), опыт оптимизации, проектирования схем, шардирования и партиционирования.
* Практический опыт с Kafka, настройка потоков данных, гарантии доставки.
* Опыт настройки мониторинга (Prometheus/Grafana, Jaeger/OpenTelemetry) и управления секретами (Vault/K8s Secrets), понимание OAuth2/OIDC.
Условия
* Гибридный формат работы (современный офис в Москве, м. Шаболовская);
* Льготные ипотечные условия кредитования;
* Подписка Прайм с возможностью совместного использования на трёх близких;
* ДМС с первого дня и скидки на страхование для близких;
* Корпоративная пенсионная программа;
* Детский отдых и подарки за счет Компании;
* Обучение за счет Компании: онлайн курсы, неограниченный доступ к библиотеке и обучение на базе Корпоративного университета, тренинги, митапы и возможность получить новую квалификацию.
Location: Almaty, Kazakhstan
Workplace: OnSite
Almaty, Kazakhstan · Trust & Safety Engineering
Why this role exists
Higgsfield builds tools for AI creators: creative workflows, collaborative projects in Cinema Studio, and a community for sharing work. We need a backend engineer who combines deep database and architecture expertise with the initiative to own product outcomes, from the first idea to production.
What you'll actually do
- Build AI creation workflows, Cinema Studio collaboration, and community features: sharing, discovery, contests, profiles, and follows.
- Own features and bugs through release and follow-up. Define API contracts and coordinate frontend work to deliver the complete feature.
- Deliver responsive UX: live progress, timely updates, and clear failure recovery, even when it takes more engineering effort.
- Remove database and service bottlenecks under high traffic; improve correctness, latency, and reliability.
- Define success metrics, build dashboards and alerts, and track adoption and system health after launch.
Must-haves
1. Deep database expertise: data modeling, indexes, query plans, partitioning, transactions, and locking. You diagnose production bottlenecks and understand the trade-offs behind your fixes.
2. Strong architecture judgment: service boundaries, APIs, asynchronous workflows, caching, and failure handling. Hands-on Kubernetes and CI/CD experience, from design and testing to deployment and debugging.
3. A track record of shipping and operating backend systems across multiple projects, including high-traffic workloads. You can explain your decisions and measurable results.
4. API security: authentication, object-level authorization, and tenant isolation. You prevent IDOR in reads and writes, including resource IDs in request bodies, and test access across users and workspaces.
5. You've built or studied social networks and collaborative tools, and can explain design trade-offs in feeds, follow graphs, notifications, sharing permissions, real-time sync, and concurrent edits.
6. High agency and ownership: you find worthwhile problems, propose improvements, remove blockers, and follow through without waiting for assignments.
7. Low ego: you welcome direct feedback, admit mistakes, change your mind with evidence, and help wherever the team needs you.
8. Ambition and optimism: hard goals and rapid growth energize you. You challenge assumptions constructively and commit to making ambitious ideas work.
9. Energy for an intense pace, shifting priorities, and urgent launches or production issues that can require work outside regular hours.
Our tech stack
- Languages and frameworks: Python (FastAPI), Go (Gin), and TypeScript (React/Next.js on the frontend).
- Data: PostgreSQL and Redis; analytical databases such as BigQuery or ClickHouse.
- Messaging: Kafka, Amazon SQS, and RabbitMQ; event-driven services and asynchronous workers.
- AWS: S3, DynamoDB, ECR, and Secrets Manager.
- Infrastructure: Docker, Kubernetes on Amazon EKS, Helm, Argo CD, and GitHub Actions.
- Observability: Prometheus, Grafana, OpenTelemetry, and Sentry.
Interview process
1. Recruiter screen: role expectations, logistics, and fit.
2. Technical interview: a difficult system you shipped, what you personally decided and built, and how your work made the team more capable without leaving it dependent on you.
3. Additional technical interview, if needed: a deeper discussion of technical skills and open questions.
4. Product fit interview: turn a user problem into a small first release, decide what to leave out, and explain how feedback would change the solution.
5. Offer.
What we offer
Competitive base in USD, equity, relocation support, and ownership of product experiences that directly shape how people create with AI.
Location: Москва
Managed Inference Platform (MIP) - корпоративная PaaS-платформа для высокопроизводительного инференса классических ML-моделей и больших языковых моделей (LLM), обеспечивающая централизованное управление GPU, эластичность ресурсов, автоматизацию развертывания и доступ к AI-сервисам.
Обязанности
* писать helm-чарты для деплоя компонентов платформы;
* автоматизировать процессы создания и обслуживания кластеров Kubernetes с помощью ansible;
* заниматься интеграцией компонентов платформы с сервисами и системами Банка;
* запускать, тестировать и оптимизировать инференс ML-моделей, в том числе в мульти-нодовых конфигурациях;
* участвовать в сопровождении платформы, поиске и устранении неисправностей, решении проблем пользователей;
* изучать и внедрять новые продукты и технологии для развития платформы.
Требования
* понимаете, как работают контейнеры, можете написать Dockerfile для нового сервиса;
* имеете опыт создания и администрирования кластеров Kubernetes, понимаете принципы работы компонентов кластера;
* умеете работать с основными элементами контейнерной инфраструктуры (container registry, secret management, ingress controller, service mesh, CNI, CSI); имеете опыт написания и отладки сложных helm-чартов и плейбуков ansible;
* понимаете внутреннее устройство Linux, умеете решать проблемы с драйверами, модулями ядра, сетевой подсистемой;
* разбираетесь в основных концепциях машинного обучения, хотя бы в общих чертах представляете, как работает LLM-трансформер, и хотите глубоко погрузиться в изучение этой темы;
* знаете, как работают современные сети и протоколы передачи данных;
* можете читать код на Python; владеете bash на уровне, достаточном для автоматизации рутинных операций
* инструментальное владение AI для анализа, генерации и автоматизации
Условия
* комфортный офис БЦ «Южный Порт» (10 минут пешком от ст. м. Кожуховская),
* ежегодный пересмотр зарплаты, квартальная и годовая премия
* корпоративный спортзал, зоны отдыха
* уникальная система обучения Сбера для профессионального и карьерного развития
* расширенный ДМС и льготное страхование семьи
* гибкий дисконт по ипотеке — всего ⅓ ключевой ставки ЦБ
* подписка Прайм с возможностью совместного пользования на трех близких
* вознаграждение за рекомендацию друзей в команду Сбера
Location: Poland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria
Workplace: Remote
BUILDING THE FUTURE OF OPEN FINANCE
Payward - the parent company behind Kraken, NinjaTrader, Breakout, xStocks, Payward Services and CF Benchmarks - has spent the last 15 years building one of the most modern and globally accessible financial infrastructure platforms in the industry, built to advance an open, global financial system.
THE TEAM
xStocks brings real-world assets on-chain as tokenized securities that are regulated, fully-backed, and tradable across multiple blockchains. Built within Payward, the xStocks team runs the infrastructure that issues, custodies, and settles these instruments across EVM, Solana, TON, Tron, and more. The platform moves real value, so security is not a feature bolted on at the end. It is a property of everything the team ships. This is a hybrid engineering and security seat built for someone who is genuinely both: you ship products alongside the engineering team when the security queue is quiet, and you own security work end to end when it lands. You report into engineering and partner closely with the Payward security, CISO, and compliance functions.
THE OPPORTUNITY
- Own security deliverables end to end. Coordinate and review smart-contract audits, respond to security questionnaires and due-diligence requests, support CISO and compliance initiatives, and turn findings into tracked, closed-out fixes.
- Run offensive assessments against our own platforms. Pentest the web apps, APIs, backend services, and on-chain components, and build the tooling to do it repeatedly rather than once.
- Continuously assess posture. Threat-model new and existing systems, review architecture and key-management flows, and maintain a living view of the risks and their mitigations.
- Review code for security. Be a default reviewer on changes touching auth, cryptography, custody, signing, and fund movement across our chains.
- Harden the platform. Improve secrets handling, IAM and least-privilege, dependency and supply-chain hygiene, and detection and logging for security-relevant events.
- Secure custody and signing workflows. Review and harden transaction signing flows, MPC and HSM integrations, signer permissions, admin roles, approval policies, and break-glass procedures.
- Contribute to product engineering. Pick up regular backlog work in TypeScript so you stay close to the codebase you are defending.
- Support incidents. Help with detection, triage, response, and post-mortems, and feed the lessons back into the program.
WHAT YOU BRING
- An engineer first. You write and review production code comfortably, TypeScript and Node.js in our stack, and you understand systems deeply enough to break them.
- Strong application and infrastructure security fundamentals. The OWASP-class vulnerability landscape, authn and authz, injection, SSRF, supply-chain risk, and secure design. You have done real offensive work in pentesting, vuln research, or red-team.
- Applied cryptography and blockchain security. Symmetric and asymmetric primitives, hashing, signatures, and key management, plus the security model of EVM, Solana, and ideally TON or Tron. You can read a smart contract and reason about how it fails.
- Ownership. You can take an ambiguous security item, an audit, a questionnaire, or an incident, and drive it to closure without being managed through it.
- Clear communication. You can explain a risk to engineers, to a CISO, and to an auditor, and tailor the message to each.
- An automation instinct. You do not want to catch the same issue manually twice, so you turn findings into tests, alerts, controls, documentation, or platform improvements.
- Risk judgment. You can tell a theoretical issue from a material one, and communicate severity, likelihood, impact, and remediation tradeoffs clearly.
NICE TO HAVE
- Experience commissioning or remediating third-party smart-contract audits.
- Familiarity with custody and signing infrastructure such as HSMs, MPC, and ForDefi-style providers, and with on-chain transaction security.
- Cloud security depth in GCP or AWS, IAM, and container and runtime hardening.
- Detection engineering and security observability, including SIEM and log-based detections.
- Relevant certifications such as OSCP, OSWE, or GWAPT.
- Prior work in a regulated fintech or tokenization/DeFi environment.
Unless a specific application deadline is stated in the job posting, applications are accepted on an ongoing basis.
Please note, applicants are permitted to redact or remove information on their resume that identifies age, date of birth, or dates of attendance at or graduation from an educational institution.
We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.
OUR COMMITMENT
Payward is powered by people from around the world and we celebrate the diverse talents, backgrounds, contributions, and unique perspectives that everyone brings to the table. We hire based on merit, seeking out people with the right abilities, knowledge, and skills for the job. We encourage you to apply for roles where you don't fully meet the listed requirements, especially if you're passionate or knowledgeable about crypto.
We may ask candidates to complete job-related skills or work-style assessments as part of our hiring process. These assessments evaluate competencies relevant to the role and are applied consistently across candidates for similar positions. Results are considered alongside experience and interviews, and are not the sole basis for any employment decision.
As an equal opportunity employer, we don't tolerate discrimination or harassment of any kind, whether based on race, ethnicity, age, gender identity, citizenship, religion, sexual orientation, disability, pregnancy, veteran status, or any other protected characteristic as outlined by federal, state, or local laws.
Stay connected
Follow us on Twitter https://twitter.com/krakenfx
Learn on the Kraken Blog https://blog.kraken.com/#:~:text=Enter%20your%20email%20address
Connect on LinkedIn https://www.linkedin.com/company/kraken-exchange/
Candidate Privacy Notice https://www.kraken.com/legal/candidate-privacy-notice
Location: EMEA - Remote
Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role.
Money is moving onto the internet, and the shift has a name:
Open Money.
This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own. Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day.
About the role
MetaMask is a self-custody wallet that does not hold users’ private keys. Blockchain transactions are generally irreversible, meaning a vulnerability in the product or its software delivery chain can lead directly to financial losses for users. As a result, MetaMask attracts sustained attention from financially motivated attackers and sophisticated supply chain actors.
We are looking for a
Senior Manager, Application Security
to lead application security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts.
The role covers architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure. This is a hands-on leadership role. You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling.
You will report to the Head of Security and work closely with MetaMask Engineering leadership to ensure security risks are understood, owned, and addressed.
Responsibilities
Leadership and planning
Lead and develop the Application Security team, including hiring, performance management and career development, while remaining directly involved in technical work.
Set the Application Security strategy, annual goals and quarterly OKRs in line with company objectives and the approved Target Operating Model. Define and track KPIs to measure performance and progress.
Report AppSec progress, coverage, remediation performance and material gaps to Security leadership and contribute to Risk Committee reporting.
Secure design and delivery
Define security review requirements across development and release, assess whether they are met and escalate unresolved risks.
Lead threat modelling and security design reviews across clients, APIs and backend services, including authentication, key management, signing and delegated actions. Assess trust boundaries across the full system and participate in architecture and RFC reviews.
Define software supply chain security requirements and work with engineering teams to implement and validate controls for dependencies, builds, artefacts and publishing.
Lead security code reviews across MetaMask applications and smart contracts, working with engineers and relevant specialists to address findings.
Define and evolve the secure development lifecycle to incorporate AI agents, including their access, actions and human review requirements. Set security standards for AI development tools, generated code and AI components in products.
Integrate security testing into development and delivery workflows, including static and dynamic analysis, dependency scanning, secrets detection and AI scanning. Evaluate tools and validate their findings.
Help engineers prevent recurring vulnerabilities through secure coding guidance, reusable libraries, training and the security champions programme.
Vulnerability management and external testing
Own application vulnerability assessment, triage, prioritisation and remediation tracking within the organisation’s vulnerability management framework. Correlate findings across clients, services and supporting infrastructure with the relevant owners to assess combined impact. Ensure findings have clear owners and deadlines, verify fixes and escalate overdue risks.
Set the scope and proposed investment for bug bounty, penetration testing and AI security scanning based on risk and results. Manage external providers, researcher relationships, rewards and payouts, and coordinate vulnerability disclosure.
Assurance and incident support
Provide evidence of application security controls for audits and assurance reviews, and support customer and partner due diligence.
Provide application security expertise during incidents, including vulnerability analysis and remediation support.
Qualifications
Required
:
At least eight years in application security or software engineering with a security focus, including two years leading people.
Strong practical code review skills in TypeScript/JavaScript, Go or Solidity across browser extensions, mobile applications and backend services, with the ability to identify vulnerabilities and work with engineers to fix them.
Proven experience securing applications across clients and backend services, including distributed authentication, authorisation and key management.
Experience building or substantially improving an AppSec programme, including security reviews, automated testing, AI scanning, vulnerability management and developer support, with sound judgement on where AI adds value and how to validate its findings.
Practical experience securing software supply chains, including dependency policies, software composition analysis, npm, artefact integrity and CI/CD.
Experience running bug bounty and penetration testing programmes, including selecting and managing external providers.
Working knowledge of EVM smart contract security, including common vulnerabilities, review methods, upgrade and admin controls, and assessing external audits.
A record of delivering security improvements through engineering teams outside your reporting line.
Clear written communication, from actionable threat models to concise summaries of risk for executives.
Preferred
:
Offensive security qualifications such as OSCP, OSWE or OSWA, or a proven record in bug bounty programmes or CTF competitions.
Experience securing browser extensions or mobile applications.
Experience securing development workflows that use AI, or AI components in production applications.
Experience in crypto, Web3 or another sector facing sustained attacks, such as fintech, payments or infrastructure.
Knowledge of or a strong interest in applied cryptography.
Familiarity with attacks by state actors against software companies, particularly DPRK supply chain and social engineering campaigns.
Experience providing evidence of secure development controls for SOC 2 or ISO 27001 assessments.
Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role.
In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At MetaMask, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3.
MetaMask is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law.
MetaMask is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself, which can be found on our page.
MetaMask may use artificial intelligence (AI) tools to support parts of our recruitment process, such as reviewing applications, screening resumes, or conducting initial candidate assessments. These tools are designed to assist our recruiting team and improve efficiency — they do not replace human judgment. A human recruiter or hiring manager reviews every candidate, and all final hiring decisions are made by people, not AI.
It is a requirement of employment in this position that applicants may be required to submit to background and identity verification checks, including but not limited to employment, education, criminal record checks, and other such checks as determined necessary by the company.
Location: Remote, Global
Workplace: Remote
ABOUT SUPABASE
Supabase is the Postgres development platform, built by developers for developers. We provide a complete backend solution including Database, Auth, Storage, Edge Functions, Realtime, and Vector Search. All services are deeply integrated and designed for growth.
ABOUT THE ROLE
We're looking for a SDK Engineer - Python to join our SDK team and own how developers talk to Supabase from Python. You'll work closely with the rest of the SDK team, our Auth, Realtime, Storage, PostgREST, Functions, CLI and Docs teams, and the open-source community, helping us make the Python SDK a library Python developers genuinely enjoy using.
Python developers reach Supabase from backend services, data pipelines, notebooks, and a growing number of AI agents and agent frameworks. The Python SDK is how all of them talk to the platform: database queries, auth, storage, realtime and edge functions, in both sync and async flavors.
This is a library-authoring role, and the work happens in the open: public repos, public issue trackers, and API decisions whose consequences last for years. If you get satisfaction from a type checker that catches the bug before your users do, from an async client that cleans up after itself, and from an issue tracker that isn't a graveyard, you'll like it here.
This role is ideal for someone who thrives in async, fast-paced environments and is excited about building developer tools that scale to millions.
WHAT YOU'LL BE RESPONSIBLE FOR
- Build and evolve our Python SDK across database, auth, storage, realtime and functions, with both sync and async APIs that feel natural in Python.
- Start new things. Alongside the maintenance work, find what's missing, make the case for it, and build it. Nobody will hand you the list.
- Work in the open. Triage inbound issues, review and shepherd outside contributions, keep CI and release automation healthy, and hold a clear, kind line on scope.
- Own the typing experience. Make the SDK fully typed and checker-friendly, so autocomplete and static analysis stay correct in real codebases.
- Keep us honest across environments. Multiple Python versions, sync and async frameworks, workers, serverless and notebooks — with dependency ranges that don't fight our users' projects. Test it, don't assume it.
- Work on realtime. Long-lived websocket connections, reconnection, and subscription and presence semantics.
- Track the platform. When auth, realtime, storage, postgrest or edge functions ship a change, make sure the SDK reflects it, and that we say so in the changelog.
- Design in public. Write the RFCs, migration guides, release notes and docs. Treat a breaking change as a deprecation path plus a migration story, not a version bump.
- Make our SDK legible to AI coding agents, which are now a major consumer of it.
YOU MIGHT BE A GOOD FIT IF YOU
- Know modern Python typing deeply. You use generics, protocols, overloads and TypedDict as design tools, run strict type checking, and fix type errors without reaching for Any.
- Have authored or maintained a published library with a public API and users outside your own company. You know what it costs to change something people depend on.
- Know the maintainer side of open source. Issue triage at volume, reviewing outside PRs, release automation, changelogs and semver, security reports, and saying no to a feature request without losing the person who asked.
- Are fluent in asyncio and have opinions on how a library should serve both sync and async callers.
- Know Python packaging for libraries: pyproject.toml, wheels, modern tooling, version support policy, and why libraries shouldn't pin their dependencies tightly.
- Test as a habit: unit, type-level and end-to-end against a real stack. Every fix comes with a regression test.
- Write well. Design docs, changelogs and issue replies are a large part of the output here, much of it public, and we're async by default.
- Have real autonomy: you find the important work, scope it, ship it, and say what you didn't do.
- Communicate clearly across both technical and non-technical audiences
- Have experience in async or globally distributed teams
- Are energized by solving real-world problems for developers
- Are comfortable navigating ambiguity and moving quickly
Bonus points if you: have run a major-version migration for a public package, know your way around JWT/OAuth, have built integrations for AI agent frameworks, or have generated idiomatic clients from a schema.
WHAT WE OFFER
- Fully Remote
We hire globally. We believe you can do your best work from anywhere. There are no Supabase offices, but we provide a WeWork membership or co-working allowance you can use anywhere in the world.
- ESOP
Every team member receives ESOP (equity ownership) in the company. We want everyone to share in the upside of what we’re building together.
- Tech Allowance
Use this budget to set up your ideal work environment—laptop, monitor, headphones, or whatever helps you do your best work.
- Health Benefits
Supabase covers 100% of health insurance for employees and 80% for dependents, wherever you are. Your wellbeing and your family’s health are important to us.
- Annual Off-Sites
Once a year, the entire company gathers in a new city for a week of connection, collaboration, and fun. It’s a highlight of our year.
- Flexible Work
We operate asynchronously and trust you to manage your own time. You know what needs to be done and when.
- Professional Development
Every team member receives an annual education allowance to spend on learning—courses, books, conferences, or anything that supports your growth.
ABOUT THE TEAM
Supabase was born-remote and open-source-first. We believe our globally distributed team is our secret weapon in building tools developers love.
- ~400 team members
- 60+ countries
- 20+ languages spoken
- Over $1B raised (including our $500M Series F)
- 540,000+ community members
We move fast, build in public, and use what we ship. If it’s in your project, we probably use it in ours too. We believe deeply in the open-source ecosystem and strive to support—not replace—existing tools and communities.
Location: Warsaw, Mazowieckie, Poland; Limassol, Cyprus; Sofia City, Bulgaria
Workplace: hybrid
Capital.com is building out its internal platform capabilities, and AI is a growing part of that. The role combines architectural ownership with hands-on delivery: you will design, build, deploy and operate the platform, including its infrastructure and DevOps. Reporting to the Director of Product Security, you will set up this function as its first member and make the early technical decisions that the future team will build on.
As Platform Architect, you will own the architecture of the platform that more than 1,000 employees rely on, including their access to AI tools such as Anthropic Claude, OpenAI and future providers.
Responsibilities:
Build the AI platform architecture: the reference design for how LLM capabilities are accessed, governed, monitored, and extended across the organisation.
Own every architectural decision for the AI platform, and document, justify, and stand behind each one.
Evaluate and select new models, tools, and frameworks as the market moves.
Deliver the platform as a service, so teams can move their agents into governed cloud infrastructure.
Govern Anthropic (Claude API, Claude Code, Anthropic Enterprise), OpenAI, and future providers, covering API access controls, credential management, model version policy, cost allocation, and acceptable use standards.
Own technical relationships with Anthropic and OpenAI at the enterprise level.
Build cloud infrastructure for AI workloads on AWS and GCP: Bedrock, SageMaker, Vertex AI, Cloud Functions, and supporting services (S3, Cloud Storage, IAM, and monitoring on both platforms).
Deploy and securely configure n8n, and build automation workflows connecting LLMs to Jira, Confluence, Slack, Google Workspace, HR systems, and proprietary data sources.
Design and secure MCP servers and gateways connecting AI agents to internal services.
Build Python integrations for AI-powered internal tooling: RAG pipelines, agent frameworks, prompt libraries, and internal AI assistants.
Deliver hands-on: you write the code, build the workflows, and deploy the tooling. This isn't an advisory role.
Build data privacy and security architecture for LLM usage in a regulated environment, including prompt classification, output controls, and audit trails aligned with FCA, CySEC, ASIC, and DORA.
Build observability across the full stack: token consumption, cost per team, latency, error rates, and policy violations across cloud platforms and direct API providers.
Build an AI adoption framework of standards, patterns, and onboarding materials that let teams across Technology use AI safely and consistently.
Run internal enablement through workshops, documentation, and direct support for teams moving from ad-hoc AI use to governed, repeatable processes.
Report AI platform status, risks, and roadmap to Technology leadership
Requirements:
8+ years in engineering, with at least 2 years building LLM-based systems in production, not prototypes or POCs.
Comfort operating as the first person in a function: you set your own priorities, unblock yourself, and deliver without a team around you.
Production-grade Python: tooling that others depend on, not scripts you hand off.
Deep, hands-on experience with the Anthropic and/or OpenAI APIs: function calling, tool use, streaming, RAG, prompt management, token optimisation, and model versioning.
Hands-on experience with agentic platforms, MCP servers, and MCP gateways, including designing flows between AI agents and internal services.
n8n: deploying, securely configuring, and maintaining multi-step automation workflows at organisation scale.
Solid AWS for AI workloads: Bedrock, SageMaker, Lambda, S3, IAM, and CloudWatch, deployed and operated in production.
Solid GCP for AI workloads: Vertex AI, Cloud Functions, Cloud Storage, IAM, and Cloud Monitoring.
Hands-on DevOps capability to deploy and run what you build.
Architectural thinking: end-to-end system design, clear trade-off documentation, and the ability to defend decisions to senior stakeholders.
Security engineering for what you build: secrets and credential management, key rotation, and least-privilege IAM across cloud and SaaS.
Data protection and auditability by design: classifying what data can reach which model and provider, controlling and logging prompts and outputs, and building audit trails that hold up to a regulator.
Fluency in the LLM threat surface, including prompt injection, data exfiltration through model outputs, insecure tool and agent use, and model supply-chain risk, with working knowledge of a recognised framework such as the OWASP LLM Top 10 or NIST AI RMF.
Nice to have:
Fintech, brokerage, or financial services background.
DORA or ISO 27001:2022 knowledge as it applies to AI system risk.
Familiarity with the EU AI Act and other AI regulatory requirements, as well as AI-specific risk and governance standards such as NIST AI RMF or ISO/IEC 42001.
LLM orchestration frameworks: LangChain, LlamaIndex, or similar.
Hands-on experience with LLM guardrail and DLP tooling: Bedrock Guardrails, Vertex AI safety filters, or prompt-firewall and PII-redaction tools.
Experience building internal developer platforms or AI centres of excellence.
AWS Solutions Architect Professional, Google Professional ML Engineer, or equivalent.
Grow with Capital.com and help shape how millions of people access the markets.
Location: Remote, Japan
GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems.
Co-create the future with us
as we build technology that transforms how the world develops software.
*
Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab.
An overview of this role
As a Customer Success Architect, you'll serve as a trusted strategic advisor and technical authority to some of GitLab's most complex and high-value Enterprise and Government customers across Japan. In this role, you will be driving and shaping how our largest customers adopt GitLab's intelligent DevSecOps platform to achieve their business goals and realise meaningful, long-term outcomes. You will be working closely with customers after the sale to turn pre-sales command plans into clear success plans, guide them through their customer journey, and drive adoption, utilization, and technical maturity. You will also be directly influencing renewal and expansion decisions through your post-sales engagements with executive-level decision makers in the account.
This is a individual-contributor role for someone who has already led pre or post sales customer engagements in large complex accounts across multiple industry domains to drive quantifiable business outcomes..The individual is comfortable operating with ambiguity, and can credibly advise VP- and C-level stakeholders on business transformation, application modernization, platform strategy, architecture, and organizational DevSecOps transformation. You'll also be shaping playbooks and best practices, and acting as an escalation point for the team's most technically or politically complex situations.
Reporting into the APJ Customer Success organization, you'll own a portfolio of GitLab's most strategic enterprise and Government accounts, act as the executive-level technical liaison for these accounts, and drive cross-functional resolution of their highest-priority issues — coordinating and, where needed, directing the efforts of Product Management, Engineering, Sales, Professional Services, and Support. You'll bring deep technical expertise in CI/CD, cloud platforms, multi-cloud, hybrid architecture and enterprise DevSecOps practices.You will use that expertise to shape customers' long-term platform strategy, apply best practices, configure GitLab for their environments and stay current with platform capabilities. In your first year, success will look like establishing yourself as the trusted senior advisor across a portfolio of flagship accounts, building strong relationships with key stakeholders, materially improving and increasing platform maturity, leading retention and renewal conversations, increasing customer satisfaction across your portfolio and contributing to the broader CSA team's technical standards and ways of working.
Some examples of our projects:
Turning pre-sales command plans into measurable customer success plans that align technical adoption with business outcomes
Leading and driving the technical strategy behind a large-scale DevSecOps platform consolidation for a regulated Enterprise account or Government, including guiding enterprise customers on GitLab best practices across CI/CD, DevSecOps, cloud architecture, TCO, applying compliance and architecture as well as business case presentations to customer executives
Owning end-to-end resolution of a critical, multi-team escalation for a flagship account — driving root cause analysis, coordinating Engineering/Product/Support, and personally briefing customer executives on remediation
What you’ll do
Owns a book of Enterprise and Government customers and drive adoption, retention, expansion, and overall satisfaction through ongoing strategic, business and technical engagement.
Serves as the senior post-sales strategic, business and technical advisor for a portfolio of GitLab's most complex, highest-value enterprise and Government accounts, shaping multi-year platform and DevSecOps strategy in partnership with customer executives, coordinating responses to questions, issues, and escalations across Support, Product Management, Sales, and Professional Services.
Translates ambiguous, high-stakes business outcomes into rigorous Customer Success Plans that are regularly reviewed with customer stakeholders. The Customer Success Plans contain clearly defined business outcome related goals, quantifiable benefits, realistic adoption milestones and remediation actions.
Prepares executive-ready reporting conducted on a regular basis with clear accountability for outcomes that demonstrate impact on adoption, retention, and expansion of GitLab products and services.
Provides deep technical guidance on enterprise-scale CI/CD architecture, DevSecOps maturity models, platform consolidation strategy, including advising on complex trade-offs (e.g., multi-cloud vs. hybrid, self-managed vs. GitLab Dedicated, etc).
Owns the full lifecycle of your account portfolio's adoption, retention, and expansion outcomes, with direct accountability for the commercial and technical health of flagship relationships.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the root cause analysis and personally managing executive communication and risk.
Leads end-to-end resolution of critical, cross-functional account escalations, ensuring root causes are identified, follow-up actions are owned, holding internal teams accountable to timelines, driving the driving root cause analysis and personally managing executive communication and risk.
Designs and delivers technical enablement programs at scale, identifying systemic maturity gaps across a portfolio and building the roadmap (not just individual sessions) that closes them.
Advises key customers stakeholders on cloud and platform architecture decisions with enterprise-wide impact, which includes multi-region deployment strategy, secrets management architecture and network/security topology for regulated environments.
Guides customers on GitLab platform best practices including Git workflows, branching strategies, CI/CD pipeline design, DevSecOps adoption patterns, and security scanning configuration.
Provides hands-on technical enablement and onboarding, including education on GitLab features, releases, and use cases, and identification of training and maturity opportunities aligned to customer goals.
Engages customers on cloud platform architecture decisions relevant to their GitLab deployment — including self-managed vs. GitLab Dedicated, Runner configuration and auto-scaling, secrets management, and network topology considerations.
Advises customers on DevSecOps consolidation value — articulating the TCO, compliance, and developer experience case for platform consolidation over fragmented toolchains.
Collaborates with Professional Services, Sales, and internal teams to identify expansion opportunities, recommend enablement interventions, and ensure a seamless customer journey from onboarding through renewal.
What you’ll bring
Must be a Japanese citizen based in Japan
Mandatory Japanese (native or professional level) and English language proficiency
Hands-on experience building or owning CI/CD pipelines end to end, including pipeline as code, multi-stage design, artifact management, and troubleshooting in real-world environments.
A career built across different direct customer facing engagement roles such as Technical Account Management, Technical Solution Sales, Pre-sales, Business Development, Consulting, Professional services across customers in different industry vertical domains like Government, Banking, Financial and Insurance Services, Manufacturing, Telecommunications, engagement with multiple technology and platform transition experience such as from on-premise deployments to Cloud, application modernization experience from monolith to microservices, from Waterfall to DevOps to DevSecOps and others to provide the depth and breadth of experience to advise customers on transformations and deployments that you've already seen play out elsewhere across your multiple customer engagements.
A long-standing demonstrated track record as the person other senior people call when an account is in genuine crisis or gained across a sustained career of Enterprise or Government account ownership
Credible judgment earned by personally owning the outcomes of dozens of complex enterprise customer account engagements over the course of a career, including situations with real commercial, technical, and reputational stakes
A consistent track record of being trusted by customer executives and internal leadership to operate with minimal oversight in ambiguous and high-pressure situations
Deep, hands-on expertise in DevSecOps practices, including shift-left security and integrating SAST, DAST, SCA, and container scanning into development workflows as well as architecting and troubleshooting CI/CD pipelines at enterprise scale
Expert-level understanding of Git, merge request workflows and delivery lifecycles, having personally guided organizations through branching strategies such as trunk-based development and GitFlow, and modern software delivery lifecycles.
Demonstrated experience with infrastructure as code, GitOps, Cloud and on-premises environments with relevant experience that support GitLab deployments, including networking, identity and access management (IAM), secrets management, and deployment considerations for regulated or high-security environments
Demonstrated experience partnering with customers to turn business requirements into actionable success plans, with measurable goals and verifiable business outcomes that are suitable for executive-level quarterly reporting.
Demonstrated ability to drive product adoption, dive deep into the accounts assigned and scale out the level of influence in the account.
Demonstrated ability to build and defend executive-level business cases (TCO, compliance, risk) that influence budget and platform strategy decisions
Demonstrated ability to operate with autonomy in ambiguous, high-stakes situations with strong communication, stakeholder management, and organizational experience to manage a portfolio of enterprise and Government customers, balance multiple priorities, guide escalations, and coordinate effectively across customer teams and internal cross functional teams to resolve issues appropriately and in a timely manner.
About the team
The Customer Success Architect team is part of GitLab's Customer Experience organization. It supports strategic enterprise and Government accounts across the APJ region through hands-on technical guidance, consultative partnership, and practical problem solving.
We act as a reliable technical advisor and an important link between customers and the broader GitLab ecosystem. We bring platform, cloud, and DevSecOps depth to customer engagements and work closely with Product Management, Engineering, Sales, Support, and Professional Services to address questions, guide customers through technical choices, navigate escalations, and help them realize measurable value from GitLab.
Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region. It's a team well suited for people who enjoy solving complex customer challenges, building long-term partnerships, and helping enterprise organizations grow their maturity with GitLab in practical, measurable ways.
How GitLab Supports Full-Time Employees
Benefits to support your health, finances, and well-being
Flexible Paid Time Off
Team Member Resource Groups
Equity Compensation & Employee Stock Purchase Plan
Growth and Development Fund
Parental Leave
Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from
underrepresented groups
are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application.
Country Hiring Guidelines:
GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy:
Please review our
Recruitment Privacy Policy.
Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also
GitLab’s EEO Policy
and
EEO is the Law
. If you have a disability or special need that requires
accommodation
, please let us know during the
recruiting process
.
Location: San Francisco, CA or Seattle, WA
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
THE ROLE
Docker AI Gateway is our answer to the complexity of taking AI agents from prototype to production. It’s a powerful, intelligent, and secure control point that eliminates the toil of model orchestration, tool management, observability, and governance—so developers can focus on building incredible AI agents, not gluing together infrastructure.
The Gateway sits at the center of modern AI applications, offering:
- A model and tool routing layer with built-in security and cost optimization
- A familiar OpenAI-compatible interface and MCP server
- Unified observability and policy enforcement
- Auto-RAG, tool injection, session summarization, and more
We’re just getting started—and we need exceptional engineers to help us build the backbone of the future of agent-based development.
_______________________________________________________________________
WHAT YOU’LL DO
- Design and implement core systems powering the AI Gateway, including the model router, MCP gateway, and control plane
- Build infrastructure that supports dynamic model selection/routing, auto-failover, cost-based routing, and policy enforcement
- Own critical capabilities such as secure credential storage, session summarization, caching, and rate limiting
- Develop APIs for developers building with OpenAI-compatible interfaces and the Model Context Protocol
- Build the underlying infrastructure to support evaluation, telemetry, replay, and backtesting for agents and LLM workflows
- Lead architectural decisions and mentor engineers as the team scales
- Performance tuning - caching, session summarization, and rate limiting that keep the gateway fast under real production load
- Contribute to roadmap planning, technical strategy, and cross-functional alignment
KEY PROBLEMS YOU’LL HELP SOLVE
- Building a unified abstraction over fundamentally different model and tool providers without leaking their differences into the developer experience
- Making credential and identity handling for tool access both airtight and fast
- Giving developers real-time and historical visibility into what their agents are doing, with policy enforcement that can't be bypassed
- Keeping latency low and reliability high as traffic scales from early adopters to production fleets
_______________________________________________________________________
WHO YOU ARE
Required Qualifications:
- 6+ years of backend engineering experience with production-grade systems
- Deep knowledge of distributed and highly scalable systems, cloud-native infrastructure, and API design
- Experience building secure, high-throughput services (e.g., gateways, proxies, load balancers, policy engines)
- Fluency in Go, and/or Rust (both preferred)
- Familiarity with AI/ML platforms or model serving infrastructure
- A strong product mindset—you're excited about building developer-facing tools
- Ownership mentality with a bias for shipping, learning, and iterating
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
Bonus Qualifications:
- Prior experience with OpenAI, Anthropic, or similar LLM APIs
- Familiarity with RAG architectures, vector databases, or agent frameworks (e.g., LangChain, AutoGPT, CrewAI)
- Experience with policy engines (e.g., OPA), observability frameworks (e.g., OpenTelemetry), or API gateways
- Understanding of OAuth2.1, secret management, and cloud IAM systems
- Experience with Kubernetes, Docker, and microservices architecture
_______________________________________________________________________
WHY JOIN US?
- Work on what’s next: The agent era is just beginning. Help define the infrastructure stack for the next generation of software.
- Own mission-critical infrastructure: Be part of a small team building the backbone of secure, intelligent agent applications.
- Impact at scale: Your work will touch tens of thousands of developers building AI-first applications.
- Engineering excellence: Join a world-class engineering team that values simplicity, code quality, and deep technical thinking.
- Remote-first culture: Work from anywhere with a team that trusts and empowers you.
Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs.
_______________________________________________________________________
COMPENSATION & EQUITY
All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location.
United States: $160,900 – $260,700 base
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: San Francisco, CA or Seattle, WA
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
THE ROLE
Docker AI Gateway is our answer to the complexity of taking AI agents from prototype to production. It’s a powerful, intelligent, and secure control point that eliminates the toil of model orchestration, tool management, observability, and governance - so developers can focus on building incredible AI agents, not gluing together infrastructure.
The Gateway sits at the center of modern AI applications, offering:
- A model and tool routing layer with built-in security and cost optimization
- A familiar OpenAI-compatible interface and MCP server
- Unified observability and policy enforcement
- Auto-RAG, tool injection, session summarization, and more
We’re just getting started and we need exceptional engineers to help us build the backbone of the future of agent-based development.
_______________________________________________________________________
WHAT YOU’LL DO
- Set technical direction for core systems powering the AI Gateway 0 the model router, MCP gateway, and control plane - and make sure architectural decisions hold up as usage scales by 10x
- Consistently identify gaps in our infrastructure, process, or tooling before they become blockers, and drive the fix from idea to production
- Take a significant, hands-on role in defining, delivering, and implementing the Gateway's technical strategy, in close partnership with engineering leadership
- Own the hardest, highest-ambiguity problems in the system: dynamic model selection, auto-failover, cost-based routing, and policy enforcement that has to work end-to-end
- Act as the go-to expert for secure credential storage, session summarization, caching, and rate limiting - the capabilities everything else depends on
- Build the infrastructure that lets us, and our customers, evaluate, replay, and backtest agent and LLM behavior with confidence
- Mentor senior and mid-level engineers, and raise the technical bar for the team through code, design review, and example
- Partner with product, design, and leadership to shape not just what the control plane UI does, but where the product goes next
KEY PROBLEMS YOU’LL HELP SOLVE
- Define the unified abstraction layer across diverse model and tool providers (OpenAI, Anthropic, Google, AWS Bedrock) that the rest of the org builds on
- Architect secure, scalable identity and credential vaulting for tool and model access, trusted enough to run at enterprise scale
- Build the infrastructure for real-time and historical analytics of AI agent behavior that leadership and customers both rely on
- Guarantee that policy enforcement and logging work end-to-end - from prompt to tool to response - with no gaps an auditor (or attacker) could find
- Set the bar for developer experience through intuitive APIs and first-class observability
_______________________________________________________________________
WHO YOU ARE
Required Qualifications
- 8+ years of backend engineering experience, with a track record of owning production-grade systems at significant scale
- Deep specialization in distributed systems, cloud-native infrastructure, and API design - recognized by peers and cross-functional partners as a go-to expert, not just experienced
- Experience building secure, high-throughput services (gateways, proxies, load balancers, policy engines), and a history of making judgment calls other engineers rely on
- Fluency in Go and/or Rust
- A track record of identifying systemic gaps - in architecture, process, or tooling-— and driving the fix across team boundaries, not just within your own
- A strong product mindset, with real experience shaping technical direction rather than only executing against it
- Comfortable operating with wide latitude: given a problem and significant autonomy in how to solve it, including when and who to pull in
- Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
BONUS QUALIFICATIONS
- Prior experience with OpenAI, Anthropic, or similar LLM APIs
- Familiarity with RAG architectures, vector databases, or agent frameworks (e.g., LangChain, AutoGPT, CrewAI)
- Experience with policy engines (e.g., OPA), observability frameworks (e.g., OpenTelemetry), or API gateways
- Understanding of OAuth 2.1, secret management, and cloud IAM systems
- Experience with Kubernetes, Docker, and microservices architecture
- A track record of setting technical standards that other teams or engineers went on to adopt
_______________________________________________________________________
WHY JOIN US?
- Work on what’s next: The agent era is just beginning. Help define the infrastructure stack for the next generation of software.
- Own mission-critical infrastructure: Be part of a small team building the backbone of secure, intelligent agent applications.
- Impact at scale: Your work will touch tens of thousands of developers building AI-first applications.
- Engineering excellence: Join a world-class engineering team that values simplicity, code quality, and deep technical thinking.
- Remote-first culture: Work from anywhere with a team that trusts and empowers you.
Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs.
_______________________________________________________________________
COMPENSATION & EQUITY
All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location.
United States: $170,350 – $275,550 base
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: Remote - US
Role Overview
This is a senior individual contributor role with significant architectural ownership. You will set the technical direction for how Backblaze detects, correlates, and responds to infrastructure incidents across our data centers, and you will mentor other engineers on the team as that platform matures. If you have a passion for making complex distributed systems visible, you are comfortable making architecture decisions that will outlive your tenure, and you are excited about applying AI and agentic automation to infrastructure operations, this role was built for you..
Key Responsibilities
Technical Leadership
Set technical direction and standards for observability across the organization, including instrumentation conventions, alerting philosophy, and dashboard design patterns.
Mentor engineers on the Observability team and act as a technical resource for SRE, Storage Engineering, and Network Engineering on observability practice.
Lead design reviews for observability work and represent the team in cross-functional architecture discussions.
Evaluate build-versus-buy decisions for observability and AIOps tooling, including data sovereignty and compliance considerations.
Produce and maintain design documentation, runbooks, and architectural decision records that make the platform operable and extensible by future contributors.
Observability Platform
Own and evolve our metrics pipeline, including VictoriaMetrics, Prometheus, and the Consul-based service discovery layer that keeps scrape targets current as infrastructure scales.
Own and expand our logging stack (OpenSearch, Logstash, and Filebeat) across all Backblaze data centers.
Architect and expand distributed tracing with Jaeger and OpenTelemetry, extending coverage beyond the current application instrumentation to new services.
Define and maintain Grafana dashboard standards for infrastructure, storage, and application performance visibility.
Drive expansion of internal application telemetry in partnership with application teams to improve visibility.
Define capacity and retention strategy for the telemetry stack as the fleet grows.
Infrastructure & Automation
Own infrastructure-as-code for observability stack deployments across multiple Kubernetes clusters.
Write and review automated playbooks for configuration management and automation across Debian-based bare metal servers.
Partner with the SRE team on Consul-based service discovery for VictoriaMetrics scrape target automation.
Lead Ceph storage observability, including OSD health, performance metrics, and integration with alerting.
Collaborate with the Network Engineering team on BGP, routing, and network-level observability.
Required Qualifications
8+ years in a systems engineering, SRE, DevOps, or observability-focused role, including demonstrated technical leadership on a platform or infrastructure team.
Deep hands-on experience with Prometheus, VictoriaMetrics, or equivalent metrics platforms, including PromQL, Alertmanager, and operating these systems at scale.
Experience designing and operating log aggregation pipelines such as Elasticsearch/OpenSearch, Logstash, Filebeat, or similar.
Working knowledge of distributed tracing (Jaeger, OpenTelemetry, or equivalent), including instrumentation strategy, not just operation.
Proficiency in Python and/or Go for automation and tooling.
Experience with Kubernetes, including deploying workloads and understanding pod networking and storage.
Experience with infrastructure-as-code tooling and configuration management.
Strong understanding of Linux internals, with Debian/Ubuntu preferred.
Demonstrated experience mentoring engineers and raising the technical bar on a team.
Excellent written and verbal communication skills. You'll work across engineering, SRE, security, and leadership, and you'll be expected to write design documents that drive decisions.
Preferred Qualifications
Experience leading the evaluation or deployment of AIOps tooling, including alert correlation, deduplication, or automated root cause analysis.
Experience building, deploying, or operating AI agents or agentic AI systems. This is a strong differentiator.
Familiarity with LLM APIs (Anthropic, OpenAI) or self-hosted LLM inference in an infrastructure context.
Familiarity with Ceph storage, including OSD management, pool configuration, and CRUSH maps.
Experience with incident management platforms.
Familiarity with BGP, network observability, or working in multi-DC environments.
Experience with secrets management in production environments.
Experience operating in a regulated or compliance-driven environment.
Prior experience in a storage-focused company or hyperscale infrastructure environment.
What You'll Work On
A telemetry stack spanning several data centers with exabytes of storage under observation.
Real infrastructure at scale: Kubernetes, Ceph, Vitess, KVM, and a custom storage platform serving hundreds of thousands of customers.
A collaborative team that values engineering excellence, transparency, and operational rigor.
Pay Transparency
To provide greater transparency to candidates, we share base pay ranges for all US-based job postings regardless of state. Final offer amounts are determined by multiple factors including candidate location, skills, depth of work experience, and relevant licenses/credentials.
The expected salary range for this role is $178,000 - $200,000 plus 10% target annual bonus and RSUs.
At Backblaze, we value being fair and good to our customers, partners, and employees. Diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We are proud to be an Equal Opportunity Employer.
middleRio de Janeiro or São Paulo, Brazil; Candidates must be based in São Paulo or Rio de Janeiro
УдалённоUSA
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
ОфисAlmaty, Kazakhstan; Competitive base in USD, equity, relocation support, and ownership of product experiences that directly shape how people create with AI
УдалённоseniorPoland; Brazil; Peru; Sweden; Argentina; Romania; Cyprus; Czech Republic; Hungary; Mexico; Chile; Bulgaria; We consider qualified applicants with criminal histories for employment on our team, assessing candidates in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance
seniorГермания, Франция, Италия; Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role; EMEA - Remote
УдалённоМожно работать из любой страны
ГибридWarsaw, Mazowieckie, Poland; Limassol, Cyprus; Sofia City, Bulgaria
УдалённоRemote, Japan; Composed of team members working remotely across time zones, we operate asynchronously to support a focused set of strategic accounts across the region